Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32291' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14296' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12696' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29339' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18862' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20894' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26659' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7814' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31889' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19967' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22579' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27979' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26712' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11931' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32453' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13175' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31117' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27153' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30939' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21396' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2219' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24132' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25708' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17016' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30684' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1215' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4591' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4514' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7381' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5774' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31039' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14157' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22533' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9846' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18012' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24356' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14891' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26040' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30529' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31619' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24101' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26086' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17532' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20855' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21272' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28590' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15648' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4475' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28118' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23846' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29972' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6584' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17332' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3455' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4924' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3261' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1539' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11366' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27816' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28913' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20600' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6746' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12186' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25453' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4421' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11275' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15186' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19449' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2188' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16350' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2984' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12456' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17424' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5596' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5519' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10000' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8756' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15169' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28105' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16443' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19256' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25113' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25653' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10510' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26775' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '396' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8657' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13060' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19481' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14675' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29201' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29966' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12481' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1594' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3603' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '234' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3016' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25059' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28019' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27671' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25647' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9877' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28521' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5797' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15974' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3047' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3951' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9776' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17039' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25415' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32160' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32099' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27779' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25237' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6578' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6586' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1834' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18237' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18646' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30399' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22201' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25160' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30739' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32524' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1772' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7906' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11862' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21590' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15262' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22525' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8594' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2830' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26149' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19805' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27655' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5311' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11607' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12303' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25554' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12457' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13052' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17209' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15069' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24611' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27740' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5829' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25407' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32492' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31464' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15671' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27609' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15788' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11368' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3858' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27926' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24974' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4700' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9351' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5550' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19821' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18546' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4692' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19945' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29371' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15254' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2498' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3765' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1014' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2281' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21620' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4508' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25754' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14612' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6167' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13345' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20523' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21790' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4176' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28499' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2908' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10086' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11353' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14143' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29928' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22588' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29766' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21321' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7434' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '689' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23320' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10176' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26527' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20114' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15377' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23737' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6940' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '541' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8014' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1888' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '451' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19766' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8701' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12418' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15407' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28636' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23281' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6532' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18283' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8819' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9119' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '952' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7851' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15029' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16296' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7031' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12324' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6527' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21645' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2052' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6159' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30482' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4892' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14816' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25499' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22207' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23474' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30652' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31749' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23304' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31572' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20556' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18191' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31450' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8224' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32547' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32638' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17264' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24442' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31620' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '119' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23109' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4574' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25565' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25910' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16446' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26296' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6957' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28661' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25599' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29734' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1454' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13786' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19094' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11414' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22308' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26681' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11159' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22911' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24014' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17030' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16668' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6762' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20647' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25445' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12009' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25414' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5503' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14573' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7636' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22555' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3578' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26952' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20128' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14744' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24263' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30515' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9158' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9490' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9326' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26309' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26426' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9986' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12611' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25289' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23334' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26534' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26511' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6199' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18020' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30852' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20284' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28683' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13654' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13924' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21365' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8956' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15462' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2876' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7697' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24147' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31609' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20229' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7774' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3564' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7612' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16142' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20979' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17494' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12843' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19851' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21984' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28474' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13964' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27523' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27183' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15276' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3911' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19179' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8053' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1996' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9026' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28705' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30174' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9126' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26017' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4653' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13183' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10224' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22393' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5479' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17571' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19349' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29524' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24834' = 'C:\bf32d3b0\<Virus name>.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- 'C:\lsass.exe' /pid=4184
- 'C:\bf32d3b0\<Virus name>.exe' force
- 'C:\lsass.exe' exe C:\bf32d3b0\<Virus name>.exe
- C:\lsass.exe
- C:\bf32d3b0\<Virus name>.exe
- C:\lsass.exe
- '24.##1.165.156':3128
- '76.##6.158.187':3128
- '93.##3.193.129':3128
- '95.##.233.105':3128
- '84.##9.174.188':3128
- '82.##1.179.146':3128
- '20#.#44.183.230':3128
- '89.##.182.43':3128
- '68.##5.124.123':3128
- '82.##.38.127':3128
- '75.##.38.181':3128
- '70.##.208.152':3128
- '24.##.17.184':3128
- '71.#01.8.94':3128
- '70.#0.159.5':3128
- '74.##.89.207':3128
- '21#.#7.128.4':3128
- '93.##7.173.138':3128
- '68.#0.64.20':3128
- '75.##8.15.77':3128
- '24.##.192.12':3128
- '71.##3.199.32':3128
- '75.##0.42.25':3128
- '82.##.100.232':3128
- '69.##9.80.49':3128
- '21#.#19.181.123':3128
- '69.##1.149.199':3128
- '24.#1.41.59':3128
- '77.##.203.59':3128
- '71.##5.74.207':3128
- '24.##3.189.200':3128
- '24.##.113.67':3128
- '72.##0.165.58':3128
- '89.##0.127.30':3128
- '68.##0.153.224':3128
- '69.##1.187.171':3128
- '89.##8.93.46':3128
- '67.#.128.39':3128
- '24.##4.243.164':3128
- '24.##.127.122':3128
- '24.##5.158.124':3128
- '79.##2.122.211':3128
- '77.#9.88.2':3128
- '74.##.219.164':3128
- '24.##9.74.254':3128
- '89.##7.71.242':3128
- '68.##5.247.92':3128
- '66.#30.49.9':3128
- '20#.#55.87.145':3128
- '24.#.171.133':3128
- '58.##.47.118':3128
- '70.##5.63.178':3128
- '80.##.251.170':3128
- '98.##9.181.225':3128
- '69.##2.216.27':3128
- '94.##9.123.35':3128
- '89.##.138.86':3128
- '71.##9.94.168':3128
- '88.##5.124.142':3128
- '67.#5.4.132':3128
- '20#.#8.45.56':3128
- '21#.#53.248.182':3128
- '86.#5.83.5':3128
- '76.##.20.168':3128
- '67.##.110.193':3128
- '75.##4.74.25':3128
- '88.##7.188.31':3128
- '68.#.243.250':3128
- '71.##4.38.69':3128
- '76.##0.153.188':3128
- '74.##.168.189':3128
- '82.##6.198.91':3128
- '83.##.216.101':3128
- '67.##3.65.95':3128
- '78.##.40.180':3128
- '21#.#2.34.180':3128
- '71.##.121.98':3128
- '24.##.33.101':3128
- '75.#09.91.8':3128
- '98.##6.124.82':3128
- '75.##7.108.116':3128
- '98.##7.112.20':3128
- '70.##6.223.60':3128
- '89.##2.5.153':3128
- '76.##8.249.115':3128
- '84.##.73.253':3128
- '68.##9.204.134':3128
- '82.##1.119.31':3128
- '92.##6.221.194':3128
- '98.##0.235.152':3128
- '20#.#03.165.15':3128
- '21#.#79.192.9':3128
- '68.##3.157.191':3128
- '68.##.236.173':3128
- '75.#08.1.27':3128
- '24.##3.40.154':3128
- '89.##.223.213':3128
- '75.##.238.121':3128
- 'localhost':584
- 'localhost':554
- '69.##1.149.199':3
- '82.##1.179.146':3
- '74.#10.htt0':3
- 't.#stdp':0
- '75.#44http':0
- '<Private IP address>':80
- '94.#49.ttp':0
- 'localhost':55
- '21#.#4.200.157':3128
- '24.##3.45.96':3128
- '93.##3.12.66':3128
- '68.#.163.214':3128
- 'localhost':5
- '84.##.15.240':3128
- 'localhost':558
- '75.#2.196.6':3128
- '72.##8.117.170':3128
- '99.##5.10.162':3128
- '72.##1.88.219':3128
- '75.##0.202.167':3128
- '24.##5.116.144':3128
- '68.#6.93.8':3128
- '69.##4.138.14':3128
- '67.#4.24.91':3128
- '84.##0.150.29':3128
- '87.##0.68.174':3128
- '94.##.205.36':3128
- '24.##.115.134':3128
- '70.##6.22.17':3128
- '92.##.226.31':3128
- '89.##.127.117':3128
- '69.##5.191.223':3128
- '68.##.65.100':3128
- '98.##3.163.223':3128
- '85.##1.181.176':3128
- '68.#.234.157':3128
- '70.##0.75.13':3128
- '24.##3.215.189':3128
- '67.##2.187.16':3128
- '76.##.243.127':3128
- '89.##0.179.12':3128
- '67.##7.119.211':3128
- '85.##5.181.33':3128
- '78.##.214.156':3128
- '76.##4.2.162':3128
- '71.##7.133.10':3128
- '85.##9.84.108':3128
- '98.##3.208.239':3128
- '96.##.141.142':3128
- '96.##.205.80':3128
- '68.##6.214.197':3128
- '24.##.92.163':3128
- '68.##6.194.126':3128
- '24.##0.161.204':3128
- '98.##4.228.157':3128
- '67.#75.27.8':3128
- '97.#6.4.18':3128
- '67.#.188.152':3128
- '21#.#27.18.48':3128
- '24.##2.73.103':3128
- '24.##1.191.192':3128
- '98.##0.175.176':3128
- '75.##4.154.200':3128
- '71.##2.42.189':3128
- '58.##.237.136':3128
- '72.##.145.52':3128
- '98.##5.19.20':3128
- '24.##4.224.130':3128
- '68.##.236.201':3128
- '70.##5.103.220':3128
- '68.#7.81.81':3128
- '83.##3.24.238':3128
- '76.##.138.108':3128
- '69.##5.38.110':3128
- '85.##0.251.107':3128
- '67.##.183.115':3128
- '75.##.12.197':3128
- '68.##.215.53':3128
- '68.##.170.74':3128
- '89.##.187.86':3128
- '76.##.254.173':3128
- '99.##5.206.135':3128
- '62.##4.126.70':3128
- '66.##9.74.38':3128
- '68.##.90.216':3128
- '22#.#66.182.8':3128
- '74.##5.36.22':3128
- '82.##4.178.32':3128
- '71.##6.9.190':3128
- '61.#1.42.21':3128
- '67.##8.11.244':3128
- '68.##.243.128':3128
- '69.#7.157.8':3128
- '71.#1.60.20':3128
- '75.##.132.109':3128
- '72.##7.60.223':3128
- '68.##3.218.50':3128
- '68.##7.183.201':3128
- '66.##8.209.164':3128
- '24.##3.230.181':3128
- '96.##.21.179':3128
- '78.##.132.216':3128
- '65.##1.212.22':3128
- '82.##.226.160':3128
- '75.##.239.183':3128
- '87.##0.109.156':3128
- '99.##5.68.251':3128
- '65.##.176.206':3128
- '20#.#51.43.150':3128
- '68.##4.173.147':3128
- '72.##6.17.91':3128
- '21#.#6.212.109':3128
- '65.##5.145.141':3128
- '76.##.111.106':3128
- '24.##1.1.149':3128
- '67.##4.228.190':3128
- '24.##.29.123':3128
- '83.##.224.11':3128
- '98.##0.218.227':3128
- '75.##.180.229':3128
- '81.##1.172.206':3128
- '74.##7.211.159':3128
- '66.##4.56.46':3128
- '70.##.240.114':3128
- '75.##.81.211':3128
- '76.##.75.213':3128
- '86.#2.41.72':3128
- '74.##.54.185':3128
- '24.#4.106.1':3128
- '69.##3.126.92':3128
- '75.##9.207.13':3128
- '76.##.168.55':3128
- '88.##9.183.123':3128
- '74.#10.0.59':3128
- '72.##1.205.48':3128
- '67.##.165.195':3128
- '81.##.189.233':3128
- '20#.#34.117.96':3128
- '76.#0.99.96':3128
- '20#.#02.255.55':3128
- '68.#3.67.54':3128
- '97.##.227.135':3128
- '68.##.24.200':3128
- '97.##.147.215':3128
- '72.##.213.135':3128
- '98.##7.223.191':3128
- '93.##4.29.174':3128
- '98.##1.23.83':3128
- '24.##2.127.210':3128
- '89.##5.38.55':3128
- '62.##1.92.44':3128
- '98.##7.107.200':3128
- '68.##.108.52':3128
- '24.##3.204.88':3128
- '68.##2.84.184':3128
- '72.##8.61.162':3128
- '77.#6.48.37':3128
- '99.##3.204.163':3128
- '66.##.98.185':3128
- '68.##9.49.117':3128
- '68.##.22.191':3128
- '84.##8.162.6':3128
- '24.##6.28.242':3128
- '67.##2.153.85':3128
- '82.##8.193.185':3128
- '24.##.179.129':3128
- '99.##7.104.107':3128
- '22#.#09.248.213':3128
- '89.##.213.149':3128
- '84.#2.65.4':3128
- '82.##.232.100':3128
- '89.##.76.145':3128
- '85.##4.191.240':3128
- '79.##2.19.240':3128
- '68.##.236.190':3128
- '80.##3.159.169':3128
- '68.#3.60.26':3128
- '76.##8.228.236':3128
- '89.##.163.17':3128
- '75.##0.69.29':3128
- '24.##7.133.185':3128
- '75.##.123.239':3128
- '98.##4.87.225':3128
- '76.##9.27.72':3128
- '76.##.59.195':3128
- '71.##5.108.112':3128
- '84.##.151.104':3128
- '76.##7.141.206':3128
- '71.##.26.183':3128
- '81.##2.110.121':3128
- '68.##0.137.202':3128
- '24.##.232.175':3128
- '21#.#67.11.242':3128
- '24.#.120.140':3128
- '78.##.130.185':3128
- '21#.#26.86.123':3128
- '99.#3.26.67':3128
- '98.##2.15.128':3128
- '68.##.198.131':3128
- '74.##2.139.15':3128
- '83.##3.101.79':3128
- '98.##0.5.239':3128
- '76.##7.217.234':3128
- '20#.#02.253.185':3128
- '93.##3.188.191':3128
- '82.##.215.92':3128
- '74.##4.68.13':3128
- '98.##0.246.131':3128
- '68.##0.58.189':3128
- '75.##.103.116':3128
- '72.##4.89.72':3128
- '24.##2.66.136':3128
- DNS ASK 94.#49.ttp
- DNS ASK 74.#10.htt0
- DNS ASK 75.#44http
- DNS ASK t.#Stdp
- DNS ASK TS##74.ttp
- DNS ASK 98.ttp
- DNS ASK 72.#16.http
- DNS ASK 68.#7.htdt
- ClassName: 'Indicator' WindowName: ''